https://www.msbiro.net/tags/github/ Recent content in GitHub on Cloud Native & Open Source: A Team Lead’s Working Journal https://www.msbiro.net/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E https://www.msbiro.net/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E Hugo -- 0.164.0 en-us Thu, 02 Apr 2026 08:00:00 +0000 https://www.msbiro.net/posts/actui-security-hardening-dependabot-openssf-scorecard/ Thu, 02 Apr 2026 08:00:00 +0000 https://www.msbiro.net/posts/actui-security-hardening-dependabot-openssf-scorecard/ Back from KubeCon EU 2026 with a free Copilot Pro+ subscription, I turned my attention to the security posture of apple-container-tui. Here's how I added Dependabot and OpenSSF Scorecard using GitHub Actions, spec-kit, and the GitHub CLI. https://www.msbiro.net/posts/investing-in-the-future-12-5-million-to-fortify-open-source-security/ Fri, 20 Mar 2026 05:45:00 +0000 https://www.msbiro.net/posts/investing-in-the-future-12-5-million-to-fortify-open-source-security/ A major coalition of tech giants including Microsoft, Google, AWS, and GitHub has announced a $12.5 million investment to strengthen open-source security. Managed by OpenSSF and Alpha-Omega, this funding aims to scale security defenses using AI and support overworked maintainers. Discover why this is a pivotal moment for the OSS ecosystem. https://www.msbiro.net/posts/github-copilot-roi-multi-model-roi/ Tue, 17 Mar 2026 10:00:00 +0000 https://www.msbiro.net/posts/github-copilot-roi-multi-model-roi/ Why GitHub Copilot Pro is currently the best value for developers, offering instant access to SOTA models like Claude 4.6 Sonnet and GPT-5.4, plus a look at Enterprise administration. https://www.msbiro.net/posts/github-spec-kit-spec-driven-development/ Wed, 21 Jan 2026 09:23:27 +0000 https://www.msbiro.net/posts/github-spec-kit-spec-driven-development/ A DevSecOps team leader's perspective on GitHub Spec-Kit, spec-driven development, and why structured AI workflows matter for compliance, auditability, and team collaboration.